Back to the CVE list
CVE-2026-36356

OS command injection

CVSS score

9.1

EPSS probability

%3.6

Risk score

0.3

Published

5 mo ago

Related Security News

Articles and analysis bulletins in which the press and security publications have covered this vulnerability:

Dark Reading05.10.2026

ClingSTUN Turns Vulnerable IoT Devices Into Proxy Nodes

The Linux backdoor exploits 24 known flaws to compromise IoT devices and uses legitimate public STUN servers to obscure communications.

Get this vulnerability through the API

Affected products, version ranges, exploitation status and patch information in a single request, with a free key.

curl -H "x-api-key: $DAYBREACH_API_KEY" \
  "https://api.daybreach.dev/api/v1/intel/cves/CVE-2026-36356"